Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

131c4ad613...cs.exe

windows7-x64

7

131c4ad613...cs.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    131c4ad6139c78ca53b4675fe3e82b80_NeikiAnalytics.exe

  • Size

    4.1MB

  • Sample

    240610-pgqyyavfmm

  • MD5

    131c4ad6139c78ca53b4675fe3e82b80

  • SHA1

    5f705b306ecb610e69d8de2fb1fecf2991867a2b

  • SHA256

    2911a56a090d7e681ac3b6027a9afc482ad6602497e7ca2f57a80f0489c362a6

  • SHA512

    0e68e0bd999417f639893da47eb4c1cfa0a0025b143c8abe912150dccebde43aa8019a4be388f2abd186434a029b0c30f9e406644b858e1dbfea6db849344001

  • SSDEEP

    49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LB7B/bSqz8b6LNXJqI20t:sxX7QnxrloE5dpUpMbVz8eLFcz

Score
7/10
persistencespywarestealer

Malware Config

Targets

    • Target

      131c4ad6139c78ca53b4675fe3e82b80_NeikiAnalytics.exe

    • Size

      4.1MB

    • MD5

      131c4ad6139c78ca53b4675fe3e82b80

    • SHA1

      5f705b306ecb610e69d8de2fb1fecf2991867a2b

    • SHA256

      2911a56a090d7e681ac3b6027a9afc482ad6602497e7ca2f57a80f0489c362a6

    • SHA512

      0e68e0bd999417f639893da47eb4c1cfa0a0025b143c8abe912150dccebde43aa8019a4be388f2abd186434a029b0c30f9e406644b858e1dbfea6db849344001

    • SSDEEP

      49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LB7B/bSqz8b6LNXJqI20t:sxX7QnxrloE5dpUpMbVz8eLFcz

    Score
    7/10
    persistencespywarestealer

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks